IT GRC Lead: Risk, AI & Compliance (Hybrid)

Mundipharma International; Cambridge; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible benefits package

Learning & development programmes

Collaborative, inclusive environment

Job summary

Mundipharma Cambridge is hiring an IT GRC Specialist to lead IT risk management and governance across the organisation. Hybrid role based in Cambridge, UK, with responsibilities spanning policy, audits, and AI risk oversight.

The role requires a strong IT governance background, familiarity with GRC frameworks, and experience coordinating with global stakeholders. Training and development opportunities are offered.

Qualifications

• University or Master’s degree in IT or related field with risk management experience.
• Experience in IT Governance, Risk & Compliance (GRC) preferred in pharma or similar industries.
• Knowledge of ISO27001, ISO9001, ITIL, COBIT frameworks.
• Ability to document and govern IT policies and controls.
• Experience with IT audits and remediation planning.

Responsibilities

• Lead end-to-end IT risk management, detailing enterprise risks and mitigation.
• Establish AI risk frameworks for responsible, compliant use of AI.
• Maintain IT policies; identify gaps and drive reviews with department heads.
• Audit internal IT processes for governance compliance and remediation.
• Coordinate with auditors and system owners to provide consistent responses.
• Identify and remediate audit risks and control weaknesses proactively.
• Deliver IT governance training and compliance reporting via LMS.
• Prepare risk reports for IT leadership and global teams.

Skills

Process mindset

Stakeholder management

Agile mindset

Negotiation

Cybersecurity collaboration

GRC platforms (Vanta)

SCORM content creation

Education

University/Master’s in IT

Tools

Vanta

Articulate

SCORM

Job description

Mundipharma Cambridge is hiring an IT GRC Specialist to lead IT risk management and governance across the organisation. Hybrid role based in Cambridge, UK, with responsibilities spanning policy, audits, and AI risk oversight.

The role requires a strong IT governance background, familiarity with GRC frameworks, and experience coordinating with global stakeholders. Training and development opportunities are offered.